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FIG.7 



OPERATION OF SEARCHING FOR, VERIFYING AND MANAGING PATHS 
( START ) 



S1001 



S1002 



HAS 

PREDETERMINED 
TIME LAPSED?^— No 

Yes 



SEARCH FOR PATHS 



S1003 



S1004 



VERIFY PATHS 



REGISTER PATHS WHOSE 
VERIFICATIONS HAVE HELD 
GOOD, IN PATH DB 



S1005- 



S1006 



IS THERE 
VALIDITY TERM-EXPIRED 
CERTIFICATE IN PATH 
DB? 

Yes 



HAS ISSUE 
ORIGIN OF TERM-EXPIRED 
CERTIFICATE ISSUED 
NEW CERTIFICATE? 



Yes 



VERIFY PATH ASSOCIATED 

WITH TERM-EXPIRED CERTIFICATE, 

BY USING NEW CERTIFICATE 



5 



S1007 



DELETE PATH ASSOCIATED 
WITH TERM-EXPIRED 
CERTIFICATE, FROM PATH DB 



8/12 



FIG.8 



OPERATION OF SEARCHING FOR, VERIFYING AND MANAGING PATHS 
A 



S1009- 



S1010 



HAS PATH 
VERIFICATION HELD 
GOOD?. 

Yes 



SUBSTITUTE TERM-EXPIRED 
CERTIFICATE IN PATH DB, 
BY NEW CERTIFICATE 



S1012 



i 



S101 1 



DELETE PATH ASSOCIATED 
WITH TERM-EXPIRED 
CERTIFICATE, FORM PATH DB 



B 



SEARCH FOR CERTIFICATION AUTHORITY 
CA WHOSE CREATION SCHEDULE TIME FOR 
CERTIFICATION REVOCATION LIST (CRL) HAS LAPSED 



S1013 



S1014- 



IS THERE 
"CERTIFICATION AUTHORITY" 
£A OF LAPSED SCHEDULE, 
TIME? 

Yes" 



S1015 



OBTAIN NEWEST CRL 
FROM DETECTED 
CERTIFICATION AUTHORITY CA 



UPDATE CRL CREATION 
SCHEDULE TIME OF DETECTED 
CERTIFICATION AUTHORITY CA 



S1016 



IS THERE 
CERTIFICATE INCLUDED 
OBTAINED LIST, IN 
PATH DB? 



Yes 



S1017 



DELETE PATH ASSOCIATED 
WITH CERTIFICATE INCLUDED 
IN LIST, FROM PATH DB 



9/12 

FIG.9 



PATH SEARCH RESULT (IN CASE OF FIG. 2) 



TERMINAL ADMITTING 

CERTIFICATION 

AUTHORITY 


PATH 


CA 12 


CA bride -CA 1 i _ CA 1 2 


CA 13 


^A bride -CA 1 1 -CA-, 3 


CA 24 


^^bride"^A 21 ~CA 22 "CA 24 


CA bride -CA 31 -CA 21 -CA 22 -CA 24 


CA 25 


^A bride -CA 21 -CA 22 -CA 25 


CA bride -CA 21 ~CA 23 -CA 26 -CA 25 


CA bride -CA 31 -CA 2l --CA 22 -CA 25 


^A bride -CA 31 -CA2i-CA 2 3~CA 26 -CA 25 


CA 26 


^ ^bride~C A 2 -, ~C A 23 ~C A 26 


CA bride -CA 21 -CA 22 -CA 25 -CA 26 


CA bride -CA 31 ~CA 21 -CA 23 -CA 26 


CA bride -CA 31 "CA 21 ~CA 22 -CA 25 -CA 26 


CA 32 


CA bride -CA 31 -CA 32 


CA bride -CA 2 1 -C A 3 -, ~C A 32 



10/12 

FIG.10 

OPERATION OF AUTHENTICATING VALIDITY OF PUBLIC KEY CERTIFICATE 



S2001 




11/12 



FIG.11 



OPERATION OF AUTHENTICATING VALIDITY OF PUBLIC KEY CERTIFICATE 



S2006 



IS TRUSTWORTHINESS 
"OF ELECTRONIC PROCEDURE CONTAINED" 
I AUTHENTICATION REQUEST? 



Yes 



DO TWO DETECTED 
PATHS HAVE, AT THE LOWEST, 
TRUSTWORTHINESS OF ELECTRONIC 
PROCEDURE? 



S2007 



Yes 



S2008 



NOTIFY IT TO REQUESTER 
THAT SUBJECT CERTIFICATE 
IS VALID 



5 



S2003 



NOTIFY IT TO REQUESTER 
THAT SUBJECT CERTIFICATE 
IS NOT VALID 



12/12 



FIG.12 



CA1 



CA2, 



CA2„ 



CA3i 



CA3, 



nl 




CA(S-1) n(m _ 1} 



CAS n 




PUBLIC KEY 
CERTIFICATE 



ELECTRONIC 
DOCUMENT 



SIGNATURE 
OF CAS 1 



■ SIGNATURE 
OF EE, 



CA : CERTIFICATION AUTHORITY 
EE : END ENTITY 

-► : FLOW OF PUBLIC KEY CERTIFICATE 



